What was in the August 2025 Microsoft Patch Tuesday?

Microsoft released 67 updates fixing 243 CVEs in August 2025, of which 5 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › August 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, August 2025

Released August 12, 2025 · data last refreshed 2026-07-09

Microsoft's August 2025 security release, published August 12, 2025: 67 updates fixing 243 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Updates (KBs)

243

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityCVSS 7.5Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-53766GDI+ Remote Code Execution VulnerabilityCVSS 9.8

CVE-2025-50165Windows Graphics Component Remote Code Execution VulnerabilityCVSS 9.8

CVE-2025-47981SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerabilit...CVSS 9.8

CVE-2025-50171Remote Desktop Spoofing VulnerabilityCVSS 9.1

CVE-2025-29964Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29966Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29967Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29840Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29962Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29963Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-50163Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-53131Windows Media Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows 10 Version 1809 for x64-based Systems (39)Windows Server 2019 (39)Windows 10 Version 1809 for 32-bit Systems (30)Windows Server 2019 (Server Core installation) (9)Microsoft Exchange Server 2019 Cumulative Update 15 (8)Microsoft Exchange Server 2016 Cumulative Update 23 (8)Microsoft SQL Server 2017 for x64-based Systems (GDR) (8)Microsoft SQL Server 2019 for x64-based Systems (GDR) (8)Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) (8)Microsoft Office 2019 for 32-bit editions (7)

Take this release to your AI

Composed from the August 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the August 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-08, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 67 updates (KBs) fixing 243 CVEs, 5 actively exploited (CISA KEV), 0 ransomware-linked, 28 Critical updates.
Actively exploited CVEs: CVE-2025-30400 (CVSS 7.8), CVE-2025-32701 (CVSS 7.8), CVE-2025-32706 (CVSS 7.8), CVE-2025-32709 (CVSS 7.8), CVE-2025-30397 (CVSS 7.5).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← July 2025 September 2025 →